Jump to content


Photo

Possible not to have XML Parser?


  • This topic is locked This topic is locked
1 reply to this topic

#1 qmayer

qmayer

    Newbie

  • Members
  • Pip
  • 4 posts

Posted 30 January 2003 - 05:31 PM

My host isn't equipped with Msft XML parser, but looking at the code:

str = Request.Form
' post back to PayPal system to validate
str = str & "&cmd=_notify-validate"
set objHttp = Server.CreateObject("Msxml2.ServerXMLHTTP")
objHttp.open "POST", "https://www.paypal.com/cgi-bin/webscr", false
objHttp.Send str

Could this be replicated by using a standard form, posting to

https://www.paypal.com/cgi-bin/webscr & str & ""&cmd=_notify-validate"?

#2 paypal_pb

paypal_pb

    Advanced Member

  • Members
  • 2,960 posts

Posted 30 January 2003 - 06:14 PM

No, it cannot.

It's possible to skip this step which opens a very small hole for a hacker to gain access without paying.

Patrick Breitenbach
PayPal, Inc.
Dev Net: https://www.paypal.com/pdn




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users